Malicious
1ca4e8f91300e4325a85b0fd33e45da6
ZIP Archive
MD5: 1ca4e8f91300e4325a85b0fd33e45da6
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 11:27 · 2 months ago
Last seen
2026-08-03 11:27 · 2 months ago
Last analysis
2026-08-03 11:27 · 2 months ago
Hashes
MD5
1ca4e8f91300e4325a85b0fd33e45da6
Sha1
76251d43e8898bcc6fde7d3d1cdcc59fc229bab4
Sha256
9776773363ff66d208a79d9cb0d26efaef92f34b11c7c1ee04e7b20d92a0dfd6
Sha384
aae80a7a6eb319ea49e0323e70550f54c80a763398dd4b927150d0c150ac75e498231960d9fc4a00960d7e72fc5250e9
Sha512
99f306d3737f0f78dc3cb7526275448de1850a2d163f0ce50f84e6713c2d5eb225693f3519b4112d3363ad10c237046a2cfc60a27ebdaaf71dcd3524811ccbab
SSDeep
12:5joXa1sEwZV8b2JAlgZwK0il/WHyicIdlPZsOWIRFbnJTF3UUGa1nGXaWaox/:9oXHEW9fZPl/WHyiT5Zs6BpGIGXRx/
TLSH
F2F0E1D66A710FD7D5480438CA3B3A2823009D944C7A4D7825F0CD56CFB698492CDE34
3 malicious · 3 files
ZIP1ca4e8f91300e4325a85b0fd33e45da6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NKH7TA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP1ca4e8f91300e4325a85b0fd33e45da6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-NKH7TA.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1ca4e8f91300e4325a85b0fd33e45da6 › DOC-NKH7TA.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account